GDPR - Information duty for contractors

This content is of information nature - it does not require any steps on your part.

Personal Data Controller

Pursuant to Article 13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (OJ EU L 2016 No. 119, hereinafter GDPR), and repealing Directive 95/46/EC, we inform you that the controller for the personal data provided by you during the existing cooperation is P.P.H. PRIMART Marek Łukasiewicz, Szosa Jadowska 70, 05-200 Wołomin-Duczki.

The contact details in matters concerning the processing of your personal data can be obtained:

- by post at the address: P.P.H. PRIMART Marek Łukasiewicz, ul. Szosa Jadowska 70, 05-200 Wołomin-Duczki,

- at the email address: rodo@primart.pl .

Purpose of the personal data processing

Your personal data, as of our Contractor (and of your agents, contractors or employees) are processed :

- to perform the agreement which binds you with the Controller or take actions necessary to make the agreement (Article 6(1)(b) of GDPR), i.e.

a)  agreements, contracts, understandings;

b) verification of paying worthiness in making an agreement or amending it;

c) orders or taking other actions on your request prior to making an agreement or carrying out an order;

Your provision of personal data is voluntary but necessary to render services and further perform contractual provisions, and failure to provide such data will result in it being impossible to perform the services.

- due to the legal requirements which the Controller is obliged to meet (Article 6(1)(c) of GDPR), i.e.

a) fluent provision of commercial services (i.a. production, sales and customer service, transport of pastry goods);

b) archiving;

c) within the scope of accountancy and tax law;

- for the purposes  necessary to protect the vital interests of a data subject or of other natural person (Article 6(1)(d) of GDPR), i.e.

a) providing your data where it is necessary to inform competent services in order to protect health, life, property;

- for the purposes resulting form legitimate interests pursued by the controller or a third party (Article 6(1)(f) of GDPR), i.e.

a)  establishing or maintaining business relations between you and the Controller;

b) exchanging information;

c) replying to your letters of inquiry;

d) seeking possible claims and/or defending against them,

e) addressing complaints and/or defending against them;

f) verification of paying worthiness in making an agreement or amending it;

g)  conducting marketing and promotional activities (commercial offers, catalogues, expositions, presentations, competitions, promotions, rebates, mailings, et al.);

Your provision of the personal data for marketing purposes is not a statutory requirement; it is voluntary. You are not obliged in any way to provide your personal data. However, your failure to provide the personal data will result in it being impossible to receive the above-mentioned marketing information.

h) surveying the satisfaction of customers;

i) sales analysis.

 The Contractor entrusts PPH Primart Marek Łukasiewicz with the processing of the personal data of its employees/contractors whose data were provided by the Contractor, and PPH Primart Marek Łukasiewicz undertakes to process such data in a manner ensuring the meeting of the requirements as set out in the GDPR Regulation. The Contractor is obliged to provide this information to its agents whose data are provided to the Controller under an agreement. PPH Primart Marek Łukasiewicz guarantees that it applies the technical and organisational measures which ensure the processing of the employees'/subcontarctors' personal data provided to it by the Contractor, in accordance with the GDPR Regulation and in a manner ensuring the protection of the rights of data subjects.

Therefore, please be informed that we will process your identification data, as of our Contractor (and of your agents and employees), as well as address data and contact details.  i.e. the full name, email address, telephone number, correspondence address, PESEL number, series and number of an ID card, series and number of a passport, registration number of a car, image in video surveillance on the company's premises, location data of Controller's entrusted property, numbers of bank accounts in case of customers being natural persons, correspondence history, and other necessary to perform a service.

Time of storing the data

The Controller stores the personal data obtained for a period necessary to fulfil the above purposes. In specific cases, depending on the subject-matter of an agreement, statutory archival periods under provisions of law will apply.

After that time your data will be removed.

Entrusting the personal data to external entities

Your personal data, as of our Contractor (and of your agents, contractors and employees) may be transferred, i.e. disclosed or made available - to the following categories of entities:
a)   our employees and contractors
b)   service providers providing P.P.H. PRIMART Marek Łukasiewicz with technical, IT, and organisational solutions enabling the rendition of services by P.P.H. PRIMART Marek Łukasiewicz and management of our company (in particular, it concerns providers of IT services, courier and postal companies, translation agencies, shipping/logistic companies, audit firms, companies organising trade fairs and other marketing activities)
c)   providers of legal and counselling services , including those supporting P.P.H. PRIMART Marek Łukasiewicz in seeking possible claims (e.g. law firms and debt collection agencies; service providers in damage liquidation, insurance companies);
The personal data may be made available to entities authorised to it under provisions of law. Without your specific consent, personal data of yours will not be provided to other third parties.

Entrusting the personal data outside the EEA

Your personal data, including the personal data of your employees/agents and contractors taking part in the achievement of the above purposes of the data processing are not transferred to entities based outside the European Economic Area.

If in the future we are going to transfer the personal data to recipients from outside the European Economic Area, it may take place, where:

- the European Commission confirmed an appropriate level of data protection for a country from outside the EEA,

- the appropriate level of data protection has been agreed with a recipient of data (e.g. with the use of the EU standard contractual clauses),

- as a result of your consent.

Profiling

The Controller informs you that your personal data, including the personal data of your employees/agents and contractors, may be processed based on the automated decision-making, with it being possible to profile them; it concerns location data used during the making use of the Controller's property.

Rights of data subjects

The rights connected with the personal data processing vested in you and your employees/agents and contractors:
a) the right to withdraw consent for personal data processing - to the extent in which the personal data are processed based on granted consent; it is possible at any time to refer to the right to withdraw consent for the personal data processing. Such withdrawal of consent will not affect the lawfulness of the processing made with consent expressed prior to its withdrawal.
b) the right of access to the personal data and obtaining copies thereof,
c) the right to request that the personal data be rectified (corrected),
d) the right to request that the personal data be erased - if there are grounds for us processing the data, it is possible to demand their erasure which is what we will do in the event that there is no our legitimate interest in the further processing. e) the right to request restriction of the personal data processing,
f) the right to object to the processing of the personal data held:

- for marketing purposes - as we process the data for marketing purposes based on legitimate interest - we will cease to process the data for such purpose.

- due to a particular situation - where we process the data based on our legitimate interest. We will cease to process the data for those purposes, unless we are in a position to demonstrate that there are our important legitimate interests overriding interests, rights and freedoms or that such data are necessary for us to establish, seek or defend possible claims.
g) the right to transfer the personal data, i.e. the right to receive such personal data from us in a structured, commonly used, machine-readable format. It is possible to transmit such data to another controller or request that we transmit them to other indicated controller. However, we will do this if such transmission is technically possible. The right to transfer the personal data exists only in relation to the data which we process under an agreement or with consent.
h) the right to lodge a complaint with a supervisory authority, i.e. an authority dealing with personal data protection - President of the Personal Data Protection Office, if it has been considered that we process the personal data in contradiction to applicable law.

To make use of the above rights, please contact us at the correspondence address or at out email address (contact details indicated above) and specify your request in an application form received from us. We point out that in order to check the grounds for an application we may ask for providing additional information.